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Abstract 

We present a new method for proving lower bounds on quantum query algorithms. 
The new method is an extension of adversary method, by analyzing the eigenspace 
structure of the problem. 

Using the new method, we prove a strong direct product theorem for quantum search. 
This result was previously proven by Klauck, Spalek and de Wolf jquant-ph /0402 1 23| ) 
using polynomials method. No proof using adversary method was known before. 

1 Introduction 

Many quantum algorithms (for example, Grover's algorithm and quantum counting 
[HI) can be analyzed in the query model where the input is accessed via a black box 
that answers queries about the values of input bits. 

There are two main methods for proving lower bounds on query algorithms: adver- 
sary method 3^ and polynomials method [7] and both of them have been studied in 
detail. The limits of adversary method are particularly well understood. The original 
adversary method has been generalized in several different ways |^ 1151 1?)]. Spalek 
and Szegedy ^H] then showed that all the generalizations are equivalent and, for cer- 
tain problems, cannot improve the best known lower bounds. For example ^11201, the 
adversary methods of "7, TW, ^ cannot prove a lower bound on a total Boolean function 
that exceeds 0{^J Ci^{J)Ci{f)), where Coif) and Ci(/) are the certificate complexities 
of f on 0-inputs and 1-inputs. This implies that the adversary methods of 0] 1151 E] 
cannot prove a tight lower bound for element distinctness or improve the best known 
lower bound for triangle finding. (The complexity of element distinctness is Q{N^/^) 
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but the adversary method cannot prove a bound better than Q{^/N). For triangle 
finding ^7|, the best known lower bound is ^1{N) and it is known that it cannot be 
improved using the adversary method. It is, however, possible that the bound is not 
tight, because the best algorithm uses 0{N^-^) queries.) 

In this paper, we describe a new version of quantum adversary method which may 
not be subject to those limitations. We then use the new method to prove a strong 
direct product theorem for the K-fold search problem. 

In the K-io\d search problem, a black box contains xi, . . . ,Xn such that \{i : Xi = 
1}\ = K and we have to find all K values i : Xi = 1. This problem can be solved with 
0{VNK) queries. It can be easily shown, using any of the previously known methods, 
that NK) queries are required. A more difficult problem is to show that ri(-\/ NK) 
queries are required, even if the algorithm only has to be correct with an exponentially 
small probability c~^, c > 1. This result is known as the strong direct product theorem 
for fc-fold search. Besides being interesting on its own, the strong direct product theorem 
is useful for proving time-space tradeoffs for quantum sorting llgl and lower bounds on 
quantum computers that use advice pp. 

The strong direct product theorem for quantum search was first shown by Klauck et 
al. |13| . using polynomials method. No proof using adversary method has been known 
and, as we show in section O the previously known adversary methods are insufficient 
to prove a strong direct product theorem for K-io\A search. 

2 Preliminaries 

We consider the following problem. 

Search for K marked elements, SEARCHk{N). Given a black box containing 
xi, . . . ,xn & {0, 1} such that Xi = 1 for exactly K values i G {1,2,..., N}, find all K 
values ii, . . . , satisfying Xi^ — 1. 

This problem can be viewed as computing an (^)-valued function f{xi, . . . , xpf) of 
variables xi, . . . , xn G {0,1}, with values of the function being indices for (^) sets 
S C [N] of size K, in some canonical ordering of those sets. 

We study this problem in the quantum query model (for a survey on query model, 
see nni)- In this model, the input bits can be accessed by queries to an oracle X and the 
complexity of / is the number of queries needed to compute /. A quantum computation 
with T queries is just a sequence of unitary transformations 

Uo^O^Ui^O^...^ Ut-1 -^O^Ut. 

The Uj 's can be arbitrary unitary transformations that do not depend on the input 
bits xi, . . . , XAT. The O's are query (oracle) transformations which depend on xi, . . . , xat. 
To define O, we represent basis states as |z, z) where i consists of [log(iV + 1)] bits and 
z consists of all other bits. Then, Ox maps |0,z) to itself and \i,z) to (— l)^'|i,z) for 
i S {1, ...,iV} (i.e., we change phase depending on Xi, unless i = in which case wc do 
nothing). 

The computation starts with a state |0). Then, we apply Uq, 0^, ■ ■ O^, Ut and 
measure the final state. The result of the computation are [log2 (^)] rightmost bits of 
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the state obtained by the measurement, which are interpreted as a description for one 
of (^) subsets S* C {1, . . . , iV}, |5| = K. 

3 Overview of adversary method 

We describe the adversary method of [2j ■ 

Let S" be a subset of the set of possible inputs {0, 1}^. We run the algorithm on a 
superposition of inputs in S. More formally, let TLa be the workspace of the algorithm. 
We consider a bipartite system H. = Ha "Hi where Hi is an "input subspace" spanned 
by basis vectors \x) corresponding to inputs x G S. 

Let UtOUt-1 ■ ■ - Uq be the sequence of unitary transformations on Ha performed 
by the algorithm A (with Uq, . . . , Ut being the transformations that do not depend on 
the input and O being the query transformations). We transform it into a sequence of 
unitary transformations on H. A unitary transformation Ui on Ha corresponds to the 
transformation [// = Ui (E) I on the whole H. The query transformation O corresponds 
to a transformation O' that is equal to Ox on subspace Ha ® \x). 

We perform the sequence of transformations U^O'U^_^ . . .Uq on the starting state 

\i>start) = |0) (8) ^ ax\x). 

Then, the final state is 

IV'end) = ^ Otxllpx) ® \x) 
xeS 

where j^/'a;) is the final state oi A — UtOUt-i . . .Uq on the input x. This follows from 
the fact that the restrictions of U!p,0' , U!p_i, . . . ,Uq to Ha ® \x) are Ut, Ox, Ut-i, ■ ■ ■, 
Uq and these are exactly the transformations of the algorithm A on the input x. 

Let pend be the reduced density matrix of the Hi register of the state lipend)- The 
adversary method of j^l |3| works by showing the following two statements 

• Let X E S and y E S he such that f{x) ^ f{y) (where / is the function that is 
being computed). If the algorithm outputs the correct answer with probability 
1 - e on both a; and y, then \pend)x,y\ < 2^/6(1 - e)|Q;:c||Q;y|. 

• for any algorithm that uses T queries, there are inputs x,y G S such that {pend)x,y > 
2,/7(T^\ax\\ay\ and f{x) ^ f{y). 

These two statements together imply that any algorithm computing / must use more 
than T queries. 

An equivalent approach |12[ 1^ is to consider the inner products {ipx\''py) between 
the final states \ipx) and {ipy) of the algorithm on inputs x and y. Then, \{pend)x.y \ < 
2y'7(T^^\ax\\ay\ is equivalent to \{ipx\tpy)\ < 2y^e(l - e). 

As a result, both of the above statements can be described in terms of inner products 
{ipxli'y), without expHcitly introducing the register Hi. The first statement says that, 
for the algorithm to succeed on inputs x,y such that f{x) ^ f{y), the states lipx) 
and {ipy) must be sufficiently far apart one from another (so that the inner product 
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is at most 2-\/e(l — e)). The second statement says that this is impossible if 
the algorithm only uses T queries. 

This approach breaks down if we consider computing a function / with success 
probability p < 1/2. (/ has to have more than 2 values for this task to be nontrivial.) 
Then, \i]jx) and jf/'y) could be the same and the algorithm may still succeed on both 
inputs, if it outputs x with probability 1/2 and y with probability 1/2. In the case of 
strong direct product theorems, the situation is even more difficult. Since the algorithm 
only has to be correct with a probability c~^, the algorithm could have almost the same 
final state on different inputs and still succeed on every one of them. 

In this paper, we present a new method that does not suffer from this problem. Our 
method, described in the next section, uses the idea of augmenting the algorithm with 
an input register together with two new ingredients: 

1. Symmetrization. We symmetrize the algorithm by applying a random permu- 
tation TT e Sjq to the input xi, . . . ,xm ■ 

2. Eigenspace analysis. We study the eigenspaces of pstart, Pend and density 
matrices describing the state of Tij at intermediate steps and use them to bound 
the progress of the algorithm. 

The eigenspace analysis is the main new technique. Symmetrization is necessary to 
simplify the structure of the eigenspaces, to make the eigenspace analysis possible. 

4 Our result 

Theorem 1 There exist e and c satisfying e>0, 0<c<l such that, for any K < N/2, 
solving SEARCHk{N) with probability at least requires (e — o{l))\/ NK queries. 

Proof: Let A be an algorithm for SEARCHk{N) that uses T < e\/NK queries. 

We first "symmetrize" A by adding an extra register TL p holding a permutation tt e 
Sn- Initially, Tip holds a uniform superposition of all permutations tt: TlnreSN l""^' 
Before each query O, we insert a transformation |i)|7r) |7r^^(i))|7r) on the part of 
the state containing the index i to be queried and Tip. After the query, we insert a 
transformation |i)|7r) — > |7r(i))|7r). At the end of algorithm, we apply the transformation 

• • ■ I^k)^) |7r^^(ii)) . . . |7r^^(iif)|7r). The effect of the symmetrization is that, on 
the subspace |s) (8" |7r), the algorithm is effectively running on the input xi, . . ., xm with 

•^i^iix) ■ ■ ■ *^7r(zft:) f ■ 

If the original algorithm A succeeds on every input (xi, . . . ,xm) with probability 
at least e, the symmetrized algorithm also succeeds with probability at least e, since 
its success probability is just the average of the success probabilities of A over all 
{xi, .. .,xm) with exactly K values Xi = \. Next, we recast A into a different form, 
using a register that stores the input xi, . . . , xtv, as in section O 

Let T-La be the Hilbert space on which the symmetrized version of A operates. 
Let Tij be an (^) -dimensional Hilbert space whose basis states correspond to inputs 
(xi, . . . ,xm) with exactly K values i : Xi = 1. We transform A into a sequence of 
transformations on a Hilbert space Ti — Ha ^ Hj. A non-query transformation U on 
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Ha is replaced with U ® I on Ti. A query is replaced by a transformation O that is 
equal to Oxi,...,xn®I O'^ the subspace consisting of states of the form |s)a<X' |xi . . .xn)i- 
The starting state of the algorithm on Hilbert space Ti. is \^pq) = \^.start)A® IV'o)/ where 
l^start) is the starting state of A as an algorithm acting on T-La and |V'o) is the uniform 
superposition of all basis states of 7i/: 

IV'o) = — 7^ \xi...xn)- 

.,a:7v:xi + ...+X7v— X 

Let \ipt) be the state of the algorithm A, as a sequence of transformations on H, after 
the t^^ query. Let pt be the mixed state obtained from \ipt) by tracing out the Ha 
register. 

We claim that the states pt have a special form, due to our symmetrization step. 

Lemma 2 The entries {pt)x,y are the same for all x = (xi, . . . ,xn), y — (2/1, • ■ • iJ/at) 
with the same cardinality of the set {I : xi ^ yi = 1\ . 

Proof: Since pt is independent of the way how the TLa ® Hs is traced out, we first 
measure TCs (in the [tt) basis) and then measure Ha (arbitrarily). When measuring Hs, 
every tt is obtained with an equal probability. Let pt^Ti be the reduced density matrix 
of Hi, conditioned on the measurement of Hs giving tt. Then, 

TT 

The entry (pt,ir)x,j/ is the same as the entry {pt,id)TT-'^{x).Tr-'^{y) because the symmetriza- 
tion by TT maps 7r^^(a;), 7r^^(?;) to x,y. For every x,y, x' ,y' with \{i : Xi — yi — 
1}| = \{i : x[ — y[ = 1}|, there is an equal number of permutations tt mapping 
7r(a;) = x' , 7r(j/) y' . Therefore, {pt)x,y is the average of {pt,id)x\y' over all x' ,y' 
with |{^ : xi = yi — 1}| = |{^ : = y^ — 1}|. This means that {pt)x,y only depends on 
\{l : XI = yi = ■ 
Any (^) X (^) matrix with this property shares the same eigenspaces. Namely |14| . 
its eigenspaces are S'o, 5i, . . ., Sk where To — So consists of multiples of IV'o) and, for 
j > 0, Sj = Tj — Tj^i, with Tj being the space spanned by all states 

xi + ...+xn=K. 

Xi 1 —...—Xa . —1 

Let Tj be the completely mixed state over the subspace Sj. 

Lemma 3 There exist ptfi > 0, . . ., pt.K > such that pt = "Y^f^oPt.jTj ■ 

Proof: According to ^1], 5*0, . . ., Sk are the eigenspaces of pt- Therefore, pt is a linear 
combination of the projectors to 5*0, . . ., Sk- Since Tj is a multiple of the projector to 
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Sj, we have 

K 

3=0 

Since pt is a density matrix, it must be positive semidefinite. This means that ptfl > 0, 
...,Pt,K>0- ■ 
Let qtj = pt,j + Pt,j+i + ■ • ■ + Pt,K- The theorem now follows from the following 
lemmas. 

Lemma 4 po.o = 1, Po,j =0 for j >0. 

Proof: The state \(po) is just \^pstart) (X" IV'o)- Tracing out \i}start) leaves the state 
Po = IV'o)(V'ol- ■ 

Lemma 5 For all j £ {1, . . . , K} and all t, qt+ij+i < qt,j+i + ^J^ gt.j 

Proof: In section |51 ■ 

Lemma 6 ' 



Proof: By induction on t. The base case, i = follows immediately from po.o = 1 and 
Po,i = • ■ • = Pq,k = 0. For the inductive case, we have 



qt+i,j < qtj H — 7=^qt,j-i 



< 



N \jj \ VN / VN \j -IJ \ VN 



t\ / t 



4:^/Ky ft+l\f4:VKy 



< 

with the first inequality following from Lemma and the second inequality following 
from the inductive assumption. ■ 

Lemma 7 If t < Om^NK, then pt,j < 0.65^ for all j > K/2. 

Proof: We have 



where the third inequality follows from j! > (|)^ which is a consequence of the Stirling's 
formula. Let j > K/2 and t < Om^NK. Then, 

< < 0.65, 



/Nj VNK/2 

implying the lemma. 
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Lemma 8 The success probability of A is at most 

( ^ 
[k/ 



K 

]=K/2+l 



Proof: In sectional ■ 

To complete the proof, given the two Lemmas, we choose a constant c > = 
0.8979... and set e = 0.04. Then, by Lemma|Hl the success probabihty of A is at most 



& . IK 



4A/y0.65^/2. 



The first term is equal to 

iK/2) _ K\{N-K)\ 



< 



Kl 



(^) (K/2y.{N ~ K/2y. - {K/2)l{N ^ K)K/^ 



o 



(K/e) 



K 



{K/2e)^/'^{N - K)K/^ 

K/2\ 



o 



2K 



e{N - K) 



A72N 



O 



= 0(0.857. 



with the third step following from Stirling's approximation and the fifth step following 



from K < N/2. The second part, 0.65^/2 is less than c^/2 if K is sufficiently 
large. 

It remains to prove the two lemmas. 



5 Proof of Lemma [S] 

We decompose the state \ipt) as X)ilo ^^^^ IV"*.*) being the part in which the 

query register contains \i). Because of symmctrization, we must have |ai| = |a2| = 
. . . = |aAr|. Let pt,i = \'ipt,i){i>t,i\- Then, 

N 

Pt^Yafpt,i. (1) 

i=0 

For i > 0, we have 

Claim 9 Let i G {1, . . . ,N}. The entry {pt,i)x,y only depends on Xi,yi and the cardi- 
nality of {I : I ^ i,xi = yi = 1}. 
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Proof: Similar to lemma |2] ■ 
We now describe the eigenspaces of matrices pt.i- The proofs of some claims are 
postponed to section 

We define the following subspaces of states. Let rj'° be the subspace spanned by 
all states ^ 

\i>lf i) = —i= \xi...xn) 

> K-j ) x:\x\=K 

Xi-. —...—Xi .—l,Xi—0 



and Tj ' be the subspace spanned by all states 

i) = \xi...xn)- 

\K-j-l) x:\x\ = K 

Xi, —...—Xi ■ — l,Xi — l 

Let S'j'° = r.'" n (r;i°i)^ and Sj^ = n (T;i\)^. Equlvalently, we can define S'f 

and S'j'^ as the subspaces spanned by the states j-^^^^ j ) and j-^^^^ j ), respectively, 
with 

Let Sl^ p j be the subspace spanned by all states 

a^S^+/3^£f^. (2) 

Claim 10 Every eigenspace of pt.i is a direct sum of subspaces 5'^ ^ ^ for some a, (3, 
j- 

Proof: In section [T] ■ 
Let ^ J- be the completely mixed state over S]^ ^ y Similarly to lemma 01 we can 
write pt,i as 

Pt,i = ^ Pa,[3,j'''a,f3,j^ (3) 

where (a, (3, j) range over some finite set At^i. (This set is finite because the Hi register 
holding . . . xn) is finite dimensional and, therefore, decomposes into a direct sum 
of finitely many eigenspaces.) For every pair (a,/9, j) S At.i, we normalize a,P by 
multiplying them by the same constant so that + = 1. Querying Xi transforms 
this state to 

ia,l3.j)eAt,i 

because l-ipl'^ j.) is a superposition of |a;) with Xi — I and, therefore, a query leaves 
\ipl'^ j^) unchanged and flips a phase on I?/; j'j^^ ,-^.). If i = 0, we have ^ = Pt.Oi because, 
if the query register contains |0), the query maps any state to itself, thus leaving pt Q 
unchanged. 
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Claim 11 Lefao = ^fEfllC....JI /^o = V^IIC-.J! ■ 
(^) C S,; 

(n) 5^„,_„^^.C5,+i. 

Proof: In section [7| H 
Corollary 12 For any a, (3, Sl^ ^ .^ C U Sj+i . 

Proof: We have Sa.jsj ^ S^'^ U S^'^, since Sa,(3.j is spanned by hnear combinations of 
states \'4'lf^,,,^i-) (which belong to 5'^'°) and states ) (which belong to S'^'^). As 

shown in the proof of claim ITTI above. 



The next claim quantifies the overlap between 5^ ^ ^- and Sj+i. 
Claim 13 



+ 1 a,/3,J 



Proof: In section [T] 

To be able to use this bound, we also need to bound ao and 



Claim 14 /3o < .. / 4(g-j) 

V^fT^ - V A^+3A--4r 

Proof: In section [3 ■ 
We can now complete the proof of lemma El By projecting both sides of pt = 
'YliiPt,iTi to {Tj)^ = Sj+i U . . . Sk and taking trace, we get 

K K 

TrP^T.ypt = ptjTrP^T.^^Tj, = ^ pt^j = qtj, (4) 
j'=o j'=j 

with the second equality following because the states Tji are uniform mixtures over 
subspaces Sj' and Sq, . . . ,Sj are contained in Tj while S'j+i, . . . , Sk are contained in 
(Tj)-^ . Because of equations (??) and 0, this means that 

N 

qtj+i ^ alTrP(^T,)^Ptfi + J2"'i Pa..p,j'TrP(T,)^Tl^,i3.j' ■ (5) 

1=1 {a,l3J')eAt,i 

Decomposing the state after the query in a similar way, we get 

N 

qt+ij+1 ^ alTrP(^T,}^Pt,o + 'Ya'^ Pa,/3j'^^-P(T,)^T-^ -/3,j' • 

»=1 {a,P,j')eAt,i 
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By substracting the two sums and using q = pt,Oj we get 

N 

qt+ij+1 - qt,j+i = X! Pa..p,j'TrP(T,)^ i^k-p.j' - (6) 

We now claim that all the terms in this sum with j' ^ j are 0. For j' < j, Sa^p.j' C 
Tj'+i C Tj, implying that TrP(T.)^Tl^ p ., = and, similarly, TrP(j^.)^T^_p ., = 0. For 
/ > i, Sa,i3.j' C Sf U Sy+i C {T.j)^, implying that 

TrPiT,)^Tl^p,j, = 1, TrP^T,)^Tl_f,,^, = 1 

and the difference of the two is 0. By removing those terms from ®, we get 

N 

gt+lj + 1 - qt.j + l = XI Pa.J3,jTrP^T,y {Ta,^l3.j " Ta,(3.j)- (7) 

t=l (a,/3j)eAt,i 

We have 

^ |a/3o + /3Qop _ |a/3o -/?aop 

"o +1^0 "o + /^o ' 

with the first equality following from Corollary^l Sj C Tj and C (Tj)-^ and the 
second equality following from Claim [T51 This is at most 

^ \af3ao(3o\ ^ ^ Q^n^n 




with the first inequality following from |a/3| < ^ — ^ and the second inequality 
following from Claim ITU and . °" < 1. Together with equation ©, this means 

V "o+Z^o 

. /-r^ N 

qt+i,j+i - qt.j+1 < -j=- 2^ a, 2^ p„_^_j (8) 

Similarly to equation Q we have 

Ptj+i +Pt,j = TrP(s,vjs,+^)Pt- 

We can then express the right hand side similarly to equation as a sum of terms 
p°,TrP(^S,uS,+i)T-j' and p'^ij J,TrP^s,uS,+^)Tl,^|3,J' ■ Since 5*^^^ C SjUS^+i (by corollary 
[T^ . we have TrPi^g.^g.^^-^Tl^ ^ ■ — 1. This means that 



N 

.2 



i=l ia,l3,j}eAt,i 
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Together with equation this impUes 



3 =3 



6 Proof of Lemma [51 

We start with the case, when Pt.k /2+1 — ■ ■ ■ — Pt.k — 0. 

( " ) 

Lemma 15 If Pt.k /2+1 = ■ ■ ■ — Pt,k ~ 0, the success probability of is at most ~7wt~- 

[k) 

Proof: Let \xp) be the final state. The state oiHi register hes in which is a (^2) 

dimensional space. Therefore, there is a Schmidt decomposition for \tp) with at most 
(^2) terms. This means that the state of Ha hes in a (^2) subspace of Ha ® Hs- 
We express the final state as 




We can think of \ip^) as a quantum encoding for x and the final measurement as a 
decoding procedure that takes and produces a guess for x. The probability that 
algorithm A succeeds is then equal to the average success probability of the encoding. 
We now use 

Theorem 16 For any encoding \ipx) of AI classical values in by quantum states 
in d dimensions, the probability of success is at most j^. 

In our case, M = (^) and d — (^^2) because the states \^) all lie in a (^^^2)" 
dimensional subspace of Ha ^ Hs- Therefore, Theorem 1161 implies Lemma [T5l ■ 

We decompose the state IVr) as Vl — (5|V't) + V^IV't) where is in the subspace 
Ha U^^qS'j and |-0t) is in Ha ^f=K/2+i^3- We have 

K 

j=K /2+1 

The success probability of A is the probability that, if we measure both the register 
of Ha containing the result of the computation and Hi, then, we get ii, . . . ,iK and 
xi, . . . , xn such that Xi^ = . . . — Xi^^ — 1. 

Consider the probability of getting ii, . . . ,ix and xi, . . . , xjy such that a;^^ — . . . — 
Xij^ = 1, when measuring Itp'j,) (instead of IV't))- By Lemma [T31 this probability is at 

most ■ We have 

\k) 



Ht - i^'rW < (1 - Vi-s^)Ut\\ + ^H'tW = (1 - Vi-s^) + Vs< 2V5. 
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We now apply 

Lemma 17 For any states |^) and {ip') and any measurement M , the variational 
distance between the probability distributions obtained by applying M to \il>) and is 
at mosi 2 II V'-i/'' II- 

By Lemma 1171 the probabilities of getting ii,...^iK and xi,...^Xn such that 
Xi-^ = . . . = Xij^ = 1, when measuring IV't) and IV't) differ by at most A^/5 = 

'^y^f=K/2+iPT,j- Therefore, the success probability of A is at most 



{k/2} 



K 

]=K/2+l 



7 Structure of the eigenspaces of j 

In this section, we prove claims ^1 and El describing the structure of the 

eigenspaces of pt.i- 

Proof: [of Claim^l We rearrange the rows and the columns of pt.i so that all rows and 
columns corresponding to \xi . . .xn) with a;^ = are before the rows and the columns 
corresponding to \xi . . . xn) with Xi = 1. We then express pt^i as 



Pt,i 



A B 
C D 



with A being a (^^^) x (J^j^^) square matrix indexed by \xi . . .xn) with Xi — 0, D 
being a (^Z}) x (^Z}) square matrix indexed by |a;i . . . xn) with Xi ^ 1 and B and C 
being rectangular matrices with rows (columns) indexed by |a;i . . . xn) with Xi — and 
columns (rows) indexed by \xi . . . xn) with Xi = 1. 
We claim that 

Pt..Slt..^t,) = aiil^;,';"^^^^^^.) +ai2|Vil;^..._,^.), 

PtA^lt....z,) = a2i|V4;°...,»,) + a22|V'I;^...,,^), (9) 
where an, ai2, 021, 022 are independent of ii, . . . , ij. To prove that, we first note that 
A and D are matrices where A^y and D^y only depends on \{t : xt — yt\\- Therefore, 
the results of Knuth J3] about eigenspaces of such matrices apply. This means that 5*^'° 
an S*^'^ are eigenspaces for A and Z?, respectively, and 

^iC....,) = «"iC....)' 



where an and 022 are the eigenvalues of A and D for the eigenspaces 5*'" and 5*^'^. It 
remains to prove that 

5|C...,..)=«i2lV^n!...,..)' (10) 
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ciC...,..> = «2iiC...,..)- (11) 

Let M be a rectangular matrix, with entries indexed by x, y, with |a;| — \y\ — K and 
Xi — 1 and yi = 0. The entries of M are M^^y = 1 if a; and y differ in two places, with 
Xi — \^ yi = Q and = 0, y; = 1 for some I ^ i and M^y = otherwise. We claim 

^iC....,) = ^i^:;!...,..) (12) 

for some c that may depend on N, k and j but not on ii, . . . , ij. To prove that, we need 
to prove two things. First, 

^ic....;=^ic....)- (13) 

This follows by 



^...=Xi-=\, 

Xi=0 



1 



V AT-j / x:Xij^=...=Xi.=l l:xi = l 
Xi=0 



■Xn) 



K-j ) v:y,^=...=yi^=l 

Second, M{Ti'") C Tj'^ and M{T^'")-^ C (rj'^)-^. The first statement is imme- 
diately follows from equation ((T^ . because the subspaces Tj' , T^*' are spanned by 
the states and IV'ii^...,^^): respectively. To prove the second statement, let 

\ip) e (T]'")^, IV-) = E^a^rla;)- We would like to prove M\^) G (r]'^)-^. This is 
equivalent to {'ipl'^ -JM|^/;) = for alHi, . . . , Zj. We have 



1 



.K-j-l) V-V'i=---=Vij='^ 



E E 



Xi=0 l-<f{il,---,ij} 



fN-j-l\ '■ — ' 
\K-3-\) x:Xi-^=...=Xi^=l, l:x,=l 



=1 



The first equality follows by writing out {tpl'^^ ^, \ , the second equality follows by writing 
out M. The third equality follows because, for every x with = K and Xi^ = . . . = 
Xi- — 1, there are K — j more / G [N] satisfying xi — 1. The fourth equality follows 
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because J2x-x ■ = =x =1'^^ ^ constant times {-iplf ^ . \ip) and ^ - 1^/") =0, because 

Furthermore, BM is an (^^^) x {^^^) matrix, with {BM)x^y only depending on 
\{l : xi = yi = 1}|. Therefore, 5*'^ is an eigenspace of BM and, since IV'iv...,^^) G S"]'^, 
we have 

for an eigenvalue A independent of ii, . . . Together with equation p2l) . this implies 
equation pUI) with 012 = A/j. 

Equation l(TT|l follows by proving 

and 

in a similar way. 



We now diagonalize the matrix 

M' = 



an ai2 
021 022 



It has two eigenvectors: ( ) and ( ) • Equation © implies that, for any 

\ Pi J \ P2 J 

111 ■ ■ ■ J * j I 

is an eigenvector of M with the same eigenvalue A. Therefore, Sai,0i,i is an eigenspace 
of M. Similarly, Sa2,f32,i is an eigenspace of M. Vectors ai|Vj-^° + Pili^l'^ i.) 
and a2\^\f j^.) + 132^%'^ i.) together span the same space as vectors and 
ij)- Since vectors \'ii>\'^ span , this means that 

Sj U Sj C S'aj.^j^i U Sa2,P2;i- 

Therefore, repeating this argument for every i gives a collection of eigenspaces that span 
the entire state space for Tij. This means that any eigenspace of M is a direct sum of 
some of eigenspaces Sa,i3.i- ■ 
Proof: [of Claim [TT| For part (i), consider the states spanning Tj. We have 



1^--..) - y^ic...) + ylrjic.,.) (14) 

because a "^zj fraction of the states . . . xn) with |x| = K and 0;^^ = . . . = i^^. = 1 

have Xi = and the rest have Xi = 1. The projection of these states to [T^j'\ U T^f\)^ 
are 
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which, by equation (0) are exactly the states spanning S*^^ ^ . Furthermore, we claim 
that 

t,^iQt;^,ut;:},ct,. (15) 

The first containment is true because is spanned by the states which 
either belong to C Tjl\ (if one of ii, . . . , ij-i is equal to i) or are a linear combi- 
nation of states ij-i) ^^'-^ ij-i> which belong to Tji°j^ and T^j'\- The second 
containment follows because the states ^._^) spanning T^jli are the same as the 
states which belong to Tj and the states ^__^) spanning T^j'\ can be 
expressed as linear combinations of ji/^ij^ i -1) s-nd IV'iii i -1) which both belong to 

The first part of 115|) now implies 
We also have S"^^ ^- C Tj , because, S^.^ j is spanned by the states 

and ) belongs to Tj by the definition of Tj and Pyi,o ^rpi.i \tpii,...,i ) belongs to 

Tj because of the second part of (HHJl. Therefore, S'^^^p^^j Q Tj n (Tj^i)-^ = Sj. 
For the part (ii), we have 

si^^i,^^^csfus;^'cT;-''uT;-'cT,+,, 

where the first containment is true because S*^^^ j is spanned by linear combinations 
of vectors \'ipif^,,,^i.) (which belong to 5**'°) and vectors .) (which belong to Sj'^) 

and the last containment is true because of the second part of equation (|15|l . 
Let _ ^ _ ^ 

I1IV'.;,...,»^.>I1 IIIV'»;,...,»,>II 

be one of the vectors spanning ■. To prove that IV") is in S'j+i = Tj+i — T,-, it 

remains to prove that is orthogonal to Tj. This is equivalent to proving that is 
orthogonal to every of the vectors \'4>i'-^,...,i'.) spanning Tj. 
Case 1. {i'l, . . . = {ii, . . .,ij}. 

bmce liA) belongs to (T^'l°i U r]l\)^, it suffices to prove that li/i) is orthogonal to the 
projection of to [T^j'^^ U P^l^i)^ which, by discussion after the equation (|14(l . 

is equal to 

From equations H16|l and (|17|l . we see that the inner product of the two states is ao/9o — 
/3oQ!o = 0. 
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Case 2. {i'l, . . . , ij} ^ {ii, . . . , ij} but one of i[, ■ ■ ■ li'j is equal to i. 

For simplicity, assume i = i'y Then, is the same as j/ ) which 

belongs to Tjl^^. By definition of S*^ ^ the vector I?/)) belongs to (T!,'!°i '-^ ^j-i)^ ^^^^ 
is therefore orthogonal to I t/iV ). 

j - 1 

Case 3. {z'j^, . . . , i^} 7^ {ii, . . . , ij} and none of I'j^, . . . , is equal to i. 

One of i'-^, • ■ ■ j must be not in {zi, . . . , ij}. For simplicity, assume it is i'j. We have 

Also, = 0, because IV'i'j,...,^' is in T^j'\yJT^j'\- As proven in the previous 

case, = 0. We therefore have 

E (V'.;,...,^;-_,,»'l^) = 0. (18) 

By symmetry, the inner product is the same for every z' ^ {i'j^, . . . , i} 

Therefore, equation ifH^ means 

(V'.^...,.^._„^'lv^> = 

for every ^ {i{, . . . , «}■ ■ 
Proof: [of Claim IT^ '^q./s.j is a mixture of states |?/') from the subspace Sl^^p j. We 
prove the claim by showing that, for any of those states the squared norm of its 
projection to Sj+i is equal to the right hand side of claim [TSl Since ji/i) S^^ ^ ^ we can 
write it as 

for some ai^^,,,^i.. Let 

IV'+)= E «^i...,».(A)iC....,)-«oi^:;i.....;), 

Then, is a linear combination of 1-0^) which belongs to Sp^ _^^j C 5*^+1 (by Claim 
[TT|l and I^A^) which belongs to ^ ^ C 5j. Moreover, all three states are linear 
combinations of IV'^), IV'^) defined by 

iv-')- E «n.....,iv;:;'...,;- 

We have 

\^)=a\4,°)+/3\4,'), 
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=/3o|^°)-ao|V''), 
1^-) =ao|^°)+/3o|V/). 

Since \'>p~^) and \ip~) belong to subspaces 5^+1 and Sj which are orthogonal, we must 
have = 0. This means 

By dividing the equation by ao/3o, we get HV'^lP = IIV'^^IP and — HV'"^!!- Since 

1, this means that Wip^W = Wip^W = ^ = 1. 



Since lies in the subspace spanned by IV""*^) which belongs to S^+i and 



which belongs to Sj, the norm of the projection of IV') to is equal to ^^|^7^Tp- By 



expressing jV'), in terms of I'?/'"'"), we get 

|(^|^+)| _ a/3o|K|p-ao/3||^i||^ ^ |q/3o - ao/?| 

11^+11 V^WT+WlF v/^g+^ ' 

proving the claim. 

Proof: [of Claim inj We will prove ^.\\ > ^\\'iPi'^.....i-\\, because that means 

and 



To prove W'iplf > \\'4'i'^ ijW, we calculate the vector 

Both vector and subspace Tjl^^ are fixed by 

t^7r|a;) = |a;7r(i) • ■■Xt,(n)) 

for any permutation tt that fixes i and maps to itself. This means that 

\'i'\f ij) is fixed by any such L/jr as well. Therefore, the amplitude of \x), \x\ — K, 

Xi = in I'tplf .j^.) only depends on . . . , ij} C^ {t : xt = 1}|. This means 
is of the form 

j 

m=0 x:\x\=K,Xi=0 

\{i-i_,...,ij}n{t:xt = l}\=m 

To simplify the following calculations, we multiply ao, . . ., by the same constant so 
that a, = Then, 1^;^;°^ j .) remains a multiple of |^o) but may no longer 

be equal to 
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ao, . . ., ttj-i should be such that the state is orthogonal to Tj^i and, in particular, 
orthogonal to states fo^' ^ G {0, • ■ • , j — !}■ By writing out (V'olV'if = 0; 

we get 

t-r.:^;;)(:-<)-- 

To show that, we first note that li^l'^ j^) is a uniform superposition of all \x), \x\ — K, 
Xi = Q, Xi-^ = . . . ~ Xi^ =1. If we want to choose x subject to those constraints and 
also satisfying . . . , ij} f] {t : Xt = 1}| = m, we have to set Xt = 1 for m — / different 
t G {ii+ii ■ ■ ■ and for K — m different t ^ {i, zi, . . . , ij}. This can be done in 

and i^x-ni) different ways, respectively. 

By solving the system of equations IjlBI) . we get that the only solution is 



N-3-\\ "J 
V K-m ) 

Let l-^o) — '^'^ normalized version of Then, 



(-iF^-Tiraf".- (20) 



II 7i,0 II /,/|,i,0 \ (V'olV'ii i) 

= (V'olV'.;,....^,) = — — (21) 



First, we have 



(V'oiC....,) = i' 

because jV'*^" i) consists of i^j^^S^^ basis states |a;), Xi = 0, — . . . = Xi. ~ 1, each 
of which has amplitude 1/^^ in both |-0o) and j^). Second, 

7n=0 ^ / ^ / m=0 ^ ^ V K-m ) 



^ V /^A ( kU ) ^ V /A (i^-m)!(iV-j^ + m-j-l)! 

hMn'^Kr^) hM) (K - jy.iN ^ K - 1)1 

{K-m)...{K-j + l) 
^^\mj {N - K -1) ...{N - K + m~ j) ^ ' 

with the first equality following because there are (^^) (^ij^/) vectors x such that — 
if, cci = 0, Xt = 1 for m different f e {zi, . . . , ij} and K — m different t ^ {i, ii, . . . , ij}, 
the second equality following from equation l|2U|l and the third equality following from 

our choice Uj — 1/ ^ {'^^'!~^) ■ 
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We can similarly calculate || ■ II • We omit the details and just state the result. 

The counterpart of equation (|21|l is 



ll^:;!....Jl 

with |-0i) being the counterpart of \tpo): 



(^ilC 



ll^ill 



m=0 x:\x\=K,Xi = l 

,. . . ,ij}n{l:xi = l}\=m 



with ao = l/y (/f-j-i)- Similarly as before, we get (V'i|V'ii"|...,i^) — 1 and 



i^iiP-E 



^ Im/ (TV-ii')... (A^-ivT + m- 7 + 1) ^ 

Each term in (|22|) is ^ "| ^ '{n^k) ~ times the corresponding term in equation (|23|) . 
We have 

K -mN - K + m- j K 
K~j N-K - K/2 

because j < K/2 and N — K + m — j < N ~ K (because of to < j). Therefore, 
IIV'olP < 4||V'i|P which implies 

■ 
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